We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
22
votes
3answers
8k views

Reset password with MySQL

Is there a way to reset an admin account's password by modifying the MySQL directly? I've found the craft_users table where the hashed password is stored but I don't know how to hash a string so that ...
10
votes
3answers
3k views

Protect a page with a single password?

Is it possible to protect a page with a single password? Instead of using crafts user features, can I allow an admin to set a specific password from the edit page? When a user visits that page, they ...
9
votes
1answer
909 views

How do I enforce stronger password requirements on my Craft site?

Craft’s only password requirements are that it is between 6 and 160 characters long. I want to require my users to enter passwords that are at least 7 characters long, with at least one number and one ...
6
votes
1answer
1k views

Password protect a single page

Is it possible to password protect a single page in Craft? Wordpress has this functionality built in. I would love to do it in Craft as well.
5
votes
4answers
2k views

How do you password protect a site in progress?

Im wondering if there is a simple way to password protect site thats in development using just Craft Personal? I setup a login page and i got {% requirelogin %} to redirect but it seems with craft ...
5
votes
1answer
1k views

Can you set the redirect path for system forgot password form?

At the moment when a user clicks on the forgot password link in an email the following happens: User is redirected to the forgot password page. User enters their new password. User is redirected to ...
4
votes
1answer
2k views

Is it possible to change a user's password in the front-end?

Is it currently possible to change a user's password in for example the profile edit form? I'm currently using the forgot password approach for this.
4
votes
1answer
935 views

Password protected area with unique files

We're considering using Craft for a new project. One of the features requested is to have a password protected area. Each user would have access to their own files only. So we'd need to be able to ...
4
votes
3answers
628 views

How can I import existing users with passwords stored in a different format than Craft's hash format?

Se need to import a large user table to a Craft installation. Unfortunately, the passwords in the imported data are SHA1 encrypted (and salted). What is the best way to enable the login of the users? ...
4
votes
1answer
516 views

What password requirements exist for new users?

My site contains a front-end registration form. New users will be automatically activated, and can begin using their account immediately. What password requirements exist? I vaguely remember a 6-...
4
votes
1answer
239 views

How do I set the user password when using saveUser service method?

I am saving users from an external source and able to create them in the Craft db as users. However, each user's password is set to null despite setting it on the user model prior to saving it. Is ...
4
votes
1answer
259 views

Password protect whole staging site. Redirect to original page not working

I'm trying to password protect a staging site. So I've put a {% requireLogin %} at the top of my _layout.html inside of a conditional tag. It's working except the redirect after login always goes to ...
3
votes
1answer
997 views

Set Users' passwords

When you create a new user in the craft backend CMS, it used to be possible to set (and change for existing users) the password. It appears recently (last 6 months+) that this feature has been ...
3
votes
1answer
893 views

Craft password encryption

When I reset my password with the same password I used before. I checked the MySQL database the old encrypted password is different from new encrypted password. Do you guys know why?
3
votes
1answer
476 views

Login attempts limit

We've just had a security review of a client's site and one main issue raised is that a brute force attack would reveal the password if the username was guessable (ie "admin"). Could a limit on the ...
3
votes
1answer
290 views

If user has no access to email how to give them a temp password?

In Craft 2.3 admins aren't able to edit users passwords. So I'm wondering if they have no access to email how can we give them a temporary password?
3
votes
2answers
174 views

Building an area for users to add content for Craft site

We're building our first project in Craft. It requires an area for users to submit events to the site, and the submissions will wait in an approval queue. We do not want these users to have access to ...
3
votes
1answer
314 views

setPasswordPath being ignored

Any idea why the following would be ignored following a frontend new password form? The user group does not have access to the control panel. 'setPasswordPath' => 'account/login/password/new', ...
3
votes
1answer
357 views

How do you prevent user lockout?

When a user forgets their password multiple times on one my front-end login screen, they sometimes get locked out of the system until an admin can unlock them in the control panel. Is there any way to ...
3
votes
0answers
139 views

setPasswordPath doesn't seem to be working [closed]

This looks like a bug to me: If I set the setPasswordPath in the general config file, then the template that I've set up is not showing up, it loads the default one when I try to load: http://site....
2
votes
1answer
114 views

Locked out of my Account, how to get back in?

This really stressing me out! When trying to log back in to Craft CMS today after som time my password wouldn´t work. I have not changed it and when trying to reset the password I´m only getting: "...
2
votes
2answers
848 views

Forgotpassword: wrong url in reset password e-mail

I have a forgotpassword form on my front-end. This works and generates reset password e-mails. But the reset url leads not to the front-end, but to the back-end. What I've already tried to fix the ...
2
votes
1answer
961 views

Forgot password URL in email returns an error

When hitting the "forgot password" link on the CP login form, an email is sent but the URL provided returns "Bad Request Param "id" doesn't exist." Is this a bug or have I done something silly? ...
2
votes
1answer
778 views

Change user password on the front end

I'm building a profile page for members on a site where members can change their password. I'm sending the request with ajax, and can successfully change password if I have the input name "password" ...
2
votes
1answer
91 views

Auto login user after password reset via a plugin in Craft3

Unlike in Craft2, there doesn't seem to be a way in Craft3 for a plugin to automatically login a user after a password reset. In Craft2, a plugin could listen for users.onSetPassword to determine ...
2
votes
1answer
183 views

Set Password form - use front-end template for admin users

I am currently building an intranet. I have created a password reset and a set password form that is used on the front-end. However, admin users get redirected to the 'Craft' set password form. is ...
2
votes
1answer
812 views

Getting “Invalid verification code.” on password reset

I've had a few users on our site have trouble resetting their password. They go through our "Forget password" flow on the front-end of our site, receive the reset email, which allows them to create a ...
2
votes
1answer
73 views

Is there a way to speed up password hashing?

I am setting up a system that migrates users from an external source and have determined the most time expensive part is when the UsersService _setPasswordOnUserRecord method hashes the password $...
2
votes
1answer
154 views

Invalid Verification Code Customization?

When a user attempts to reset their password, they're emailed a link -- if they click on this link late, or click on it twice, they're shown the "Oops! Invalid verification code. Please login or reset ...
2
votes
1answer
254 views

Can Auth0 be used for Craft Commerce user accounts?

I want to use Auth0 to provide a Single Sign On (SSO) for a couple of services I am integrating, one of which is Craft Commerce user accounts. Does Craft Commerce allow something like Auth0 for ...
2
votes
1answer
214 views

Password should fail on front-end registration form

Update For anyone else having a braindead moment, registration form errors only display for password when logged out. If you're logged in as admin they won't display. User posted even though using an ...
2
votes
1answer
387 views

How can I use the password confirmation modal on other forms?

While logged into the Control Panel, you can edit your account information. When you try to change your email address or password, Craft asks you to enter your current password (for security reasons). ...
2
votes
1answer
223 views

Redirect on front end Password Redirect not working

Craft 2.6.2963 I've got a password reset form on the front end which works correctly sending the email. However it doesn't redirect on submit, unless you are loggedin. redirect works if logged in, ...
1
vote
2answers
4k views

Recovering (or creating a new) admin account

Our developer hasn't been able to recover his password for the account he used to setup the site, and now he's non-responsive. The site is on my server and I have full access, but his account is the ...
1
vote
2answers
134 views

Importing members from EE without password reset

We've rewritten an EE site on Craft and now need to import the members. My understanding is that since passwords are hashed & not encrypted there is no way to transfer the passwords from EE to ...
1
vote
1answer
380 views

How do I UNLOCK my account?

My account is locked and I cant figure out how to unlock it. I tried resetting the password, but have yet to receive an email with a new one. Is there an alternative way to logging back on? I recently ...
1
vote
1answer
1k views

Reset the password of an admin account

I recently inherited a project in Craft from another developer, but he's moved on and no one knows what his admin password was. I've tried generating a password on an account with a fresh install and ...
1
vote
1answer
85 views

How to get the original entered password value on registration form error?

I want to customize the user-registration-form with error/success-states. If, for example, the user enters a wrong email, but correct username and password, it would be nice to set the value of the ...
1
vote
1answer
242 views

How to keep the setPasswordPath config when reset password link is expired?

In config.php file, setPasswordPath is set to match a custom template. This is working fine by following the reset password link sent by email (for a front end user). But after I've changed the ...
1
vote
1answer
149 views

What is the least intrusive way to allow a user to change their email address on the front-end?

I have a page that will allow the user to change their name, email address etc. If I have an email field on my page and submit I get this error. Param “password” doesn’t exist. I have read that in ...
1
vote
1answer
279 views

Looking for a private commenting solution for member area

I've had a look through some previous posts and the craft docs and it doesn't look like anyone has done anything similar to what I want. Essentially I have a 'client area' where a user can log in and ...
1
vote
2answers
43 views

Prevent EVENT_BEFORE_VALIDATE in specific case

I have a registration form and its custom validation in PHP plugin code. However, the validation works when user set a new password. I supposed that $event->isNew is good to detect if it is a new ...
1
vote
2answers
119 views

Frontend form to change Craft Commerce user's password?

I'm trying to modify Craft 3's example 'Change password' form to work with a logged in Commerce 2 user, and have copied that code to templates/setpassword.twig. Two problems... (1) The {{ code }} ...
1
vote
1answer
110 views

Craft 3 setPasswordPath config not working for front end users

How do I change the link that's sent in a forgot password email that's sent to front end users in Craft 3? The setPasswordPath config isn't working for me. The users don't have access to the CP. In ...
1
vote
1answer
99 views

Craft 3 validate new password in change password

I'm trying to validate user's new password and confirm password in my custom plugin init(). Event::on(User::class, User::EVENT_BEFORE_SAVE, function(Event $event) { $formData = $_POST; $...
1
vote
1answer
136 views

Enforce password change every 90 days (3 months)

I am currently building an intranet for a client and one of their requirements is that staff must update their passwords every 90 days. I assume I would need to build a plugin for this, but what ...
1
vote
1answer
286 views

Password validation for resetting password

I have the following code to further validate passwords when creating/registering an account which is working fine. However, when trying to use this same validation for resetting a password I am not ...
1
vote
1answer
362 views

Update user password

I'm trying to update a user password on save via a custom field (on registration via the back-end - the admin needs to specify a password on registering a user). Is this even possible? Came across ...
1
vote
1answer
134 views

Require password from current user on front-end form?

I have a controller that handles some font-end form validation. From that controller I’d like to require the current (already logged in) user’s password to update any field. How can I do that?
1
vote
1answer
16 views

Default Users Password Regex

Assume a front end registration form. I would like to validate user passwords before posting to the server. I have not been able to find the default password requirements as of yet for craft 3. Could ...